Mozilla Security

Views and updates from the Mozilla Firefox security team

[Julien Vehent @jvehent]

"XSS vulnerabilities account for 66% of valid submissions" is why we're pushing hard on CSP in @mozsec . src: https://t.co/ibYXZ8tqMC

[ISSTA Conference @issta_conf]

Christian Holler’s MSc thesis on random testing JavaScript netted him $53,000 in bug bounties and a job at Mozilla: https://t.co/vhTYDUHFZY

[Julien Vehent @jvehent]

We're growing the Firefox Services Security team. Want to help @psiinon and I keep the fox safe? Head over to https://t.co/CMzRIhYAgv

[Julien Vehent @jvehent]

We're running a RFP to audit the security of Firefox Accounts. Got the pentest/crypto skills? Email me at jvehent[at]https://t.co/Ps7H5vPsZX

[April King 🌀 @CubicleApril]

Woo! The @mozsec HTTP Observatory has hit a million scans! https://t.co/oc7m4H7OZ8 Now I just need to find some time to finish the site!

[Mozilla Security @mozsec]

Thanks to @CESG_HMG of GCHQ for helping protect Firefox users. Excellent bug reports for
https://t.co/40eq6AT7mM &
https://t.co/5C6EMK0ewi

[Mozilla @mozilla]

Bending the curve for HTTPS adoption, which has quadrupled since @letsencrypt launched! https://t.co/tDrsmdjr6E

[Bobby Holley @bhology]

How architecting Firefox for security stopped the bugs and spared us the worst of a security breach: https://t.co/b5L7QrDo8L

[Christian Holler @mozdeco]

Extend #aflfuzz mutation routines with Python modules: https://t.co/XYmLP3BvO2

[Christian Holler @mozdeco]

Fuzzing a specific part of a large project with #aflfuzz? Try the new partial instrumentation feature: https://t.co/KVzU8ZqMyv

[Start Mozilla @StartMozilla]

Keeping our security code clean and shiny is a big deal. Help us keep our shields up in this good first C++ bug: https://t.co/5YOBCPGzwp

[Tom Schuster @evilpies]

Really nice JIT security improvement by @jandemooij: JIT code is now W^X, i.e non-writable unless patching! https://t.co/C6hWfqU42A

[Mark Goodwin @mr_goodwin]

Firefox now supports OCSP Must-Staple: https://t.co/N9WGwjBUYm

[Brad Hill @hillbrad]

Congrats to editors @freddyb @frgx @fmarier @metromoxie! Subresource Integrity is a W3C Candidate Recommendation. https://t.co/14OzCMuvE3

[Adriana Porter Felt @__apf__]

Firefox is simplifying their security indicators. Cool work! https://t.co/8HpgfiTITM

[Firefox 🔥 @firefox]

We’re taking private browsing and #usercontrol to a new level today. https://t.co/mzuL9jTiLC

[Tanvi @TanviHacks]

Updated security indicators released today in Firefox 42- https://t.co/bS99U1QTmt